Recursion allows your DNS server to contact other DNS servers to assist in resolving domain names when it cannot resolve the domain itself. While recursion can prove to be useful tool when it is necessary, it also opens the DNS server open to attack, which could take down the DNS server altogether. Recursion is generally only necessary when there is a known need for it. If recursion is not a known need for your DNS server, it is best to disable recursion. Follow the steps below based on your operating system or control panel to disable DNS recursion.
Select Tools and Settings.
Click DNS Template Settings from the section.
Select Localnets from the DNS Recursion section.
Click the OK button.
Now Right click on the desired DNS Server in the Console Tree.
Select the Proprerties tab.
Click the Advanced button in the Server Options section.
Select the Disable Recursion checkbox.
Click the OK button.
Add the following details to the Options section:
Save and exit the file. The restart the named service.
Disable Recursion in PleskLog into the Plesk Admin Panel.
Select Tools and Settings.
Click DNS Template Settings from the section.
Select Localnets from the DNS Recursion section.
Click the OK button.
Disable Recursion in Windows Server 2003 and 2008Go to DNS Manager from the Start menu:
Click the Start button.
Select Administrative Tools.
Select DNS.
Now Right click on the desired DNS Server in the Console Tree.
Select the Proprerties tab.
Click the Advanced button in the Server Options section.
Select the Disable Recursion checkbox.
Click the OK button.
Disable Recursion in LinuxLocate the named.conf file within the operating system.Open the named.conf file in your preferred editor.
Add the following details to the Options section:
opttions{
.............
allow-transfer {"none";};
allow-recursion {"none";};
recursion no;
............
};
Save and exit the file. The restart the named service.
# /etc/init.d/named restart
